Description
An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details.
Scores
CVSS v3
7.5
EPSS
0.0012
EPSS Percentile
31.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-331
Status
published
Products (3)
selinc/sel-451_firmware
r326-v0
selinc/sel-451_firmware
r327-v0
selinc/sel-451_firmware
r315-v0 - r315-v4
Published
Nov 30, 2023
Tracked Since
Feb 18, 2026